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AMENDJV ENTS TO THE CLAIMS 



! sessic n 



rec eive 



I. (Previously presented) A 
Mobile IP, comprising: 

an MN that is configured to: 
parameters that are used to generate 
session by sending the Reg-Req message; 
that may be used to directly communicate 
MN is in a foreign authority, wherein the 
include a first at least one key, a second a1 

an FA that is configured to: 
session is valid; and when valid, sign and 
authentication session; receive, and 
the session keys; sign, and send the Reg-: 
an AAAF that is configured to 
a first at least one key of the session keys 
Hellman parameters; add an identifier 
message; receive, authenticate, sign and 
an AAAH that is configured 
a second at least one key of (he session 
authenticate the Reg-Reply message; 
the session keys; sign and send the Reg- 
an HA that is configured to: 
in response to the Reg-Req message; and 



s /stem for a secure key distribution protocol in AAA for 



g( nerate ; 



2. (Original) The system 
n, a g, and a p parameter; wherein the 
in signing the Reg-Req message and the 
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a Reg-Req message that includes Diffie-Hellman 
keys and produce signatures; initiate an authentication 
receive a Reg-Reply message that includes session keys 

the AAAH, AAAF, HA, and FA nodes while the 
J ession keys are encrypted and wherein the session keys 
least one key, and a third at least one key; 

the Reg-Req message; ensure that the authentication 
«nd the Reg-Req message; otherwise, end the 

the Reg-Reply message; decrypt at least one key of 
message to the MN; 
receive and authenticate the Reg-^Req message; generate 
ising the Diffie-Hellman algorithm and the Ditfie- 

to the Reg-Req message; sign and send the Reg-Req 
the Reg-Reply message to the FA; 
receive and authenticate the Reg-Req message; generate 
;; sign and send the Reg-Req message; receive and 
a third at least one key of the session keys; encrypt 
message to the AAAF; 

the Reg-Req message; prepare a Reg-Reply message 
;end the Reg-Reply message to the AAAH. 



authei iticate 



E eply J 



reU ting 



s< aid 



to: 



ke ys 



gem rate 



R sply ] 



re »ive 1 



of (flaim 1, wherein the Diffie-Helhnan parameters include an 
are used to generate the session keys and are used 
Reply message. 



pari meters i 



Feg- 
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3. (Previously presented) The; 
the Reg-Reply message include an i 
identifier is selected from an NAI and a 



L identifi er 



nt w 



4. (Original) The system of Claim 
message are signed using a security 
Reg-Reply message and a receiver of the 



association 



5. (Previously presented) Thcf 
configured to: choose a secret random nuqiber 
the DifHe-Hellman algorithm that is used 
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system of Claim 2, wherein the Reg-Req message and 
relating to where the message originated, wherein the 
random nonce. 



3, wherein the Reg-Req message and the Reg-Reply 
between a sender of the Reg-Req message and the 
flleg-Req message and the Reg-Reply message. 



system of Claim 4, wherein the AAAF is further 

y to calculate a parameter q = g^ mod n according to 
h generating the session keys. 



6. (Original) The system of C laim 4, wherein authenticating the Reg-Req message and 
the Reg-Reply message further comprises ensuring that the Reg-Req message and the Reg-Reply 
message came firom the sender by checkin g the signature relating to a security association between 
the sender and the receiver. 



7. (Original) The system 
determine the AAAH for the MN in 



of (Jlaim 6, wherein the AAAF is further configured to 
respofise to the identifier associated with the MN. 



8. (Previously presented) Th< 
configured to store a time associated with 
prevent a Reply message failure. 



system of Claim 7, wherein the AAAF is further 
the initiation of the authentication session in order to 



9. (Original) The system of Olaim 
protect the authentication process from a 
MN, generate an error. 
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8, wherein the AAAH is fiirdier configured to 
play attack, and when the AAAH does not recognize the' 
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10, (Original) The system of dlaim 
the FA directly communicate to the PIA th rough 
keys for the FA, HA, and MN, and distribi iting 



1 1 . (Original) The system of Olaim 
fashion, further comprises encrypting the 



10, wherein distributing the session keys in a secure 
! ession keys. 



12. (Original) The system of Cjlaim 
a current location of the MN and store the [session 



14. (Previously presented) Thii 
authority and a foreign authority to maintain 



IS. (Original) The method of Claim 
b^ween the MN, the AAAH, the AAAF, 

establishing a secure associatidn 
establishing a secure associatic n 
establishing a secure associatic n 
establishing a secure associatic n 
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9, wherein the AAAH is fiulher configured to help 
a security association by generating the session 
the session keys in a secure fashion. 



1 1 , wherein the HA is further configured to register 
keys. 



13. (Currently Amended) A method for a secure key distribution protocol in AAA for 
Mobile IP, comprising: 

establishing secure association^ between a MN, an AAAH, an AAAF, a HA, and a FA to 
help ensure secure communication; 

securing a Reg-Req message a^ a Reg-Reply message used in establishing the secure 
associations; 

creating a plurality of session l|eys by the AAAH and at least another session key by t he 
AAAF; and 

distributing the session keys in}; 



a secure manner. 



method' of Claim 13, further comprising using a home 
and help establish the secure associations. 



14, wherein establishing the secure associations 
he HA, and the FA, further comprises: 
between the MN and the AAAH; 
between the AAAH and the HA; 
between the AAAF and the AAAH; 
between the AAAF and the FA; and 
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establishing a secure associatio i between the AAAF and the NfN. 



16. (Original) The method of Claim 
signature is an authentic signature based 



ion 



17. (Original) The method of ({laim 
between the MN. the AAAH, the AAAF, ttie 
further comprises: 

signing the Reg-Req message abd 
authenticating the received Re( 



18. (Original) The method of (Dlaim 
comprises utilizing DifiGe-Helhnan parameters 



19. (Original) The method of Claim 
associated with ttie MN> a timestamp, a ct^lenge 
parameters. 
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1 5, further comprising determining when a 
the secure associations and the session keys. 



16, wherein establishing the secure associations 
HA, and the FA to help ensure secure communication. 



the Reg-Reply message using the session keys; and 
Req message and the Reg-Reply message. 



17, wherein creating the session keys further 
and the Diffie-Hellman algorithm. 



18, wherein the Reg-Req message includes an NAI 
issued by the FA, and the Diffie-Helhnan 



20. (Original) The method of < ^Imm 1 9, wherein the Reg-Reply message 
includes an identifier and the session keys 
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